Elixir-plug

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 6
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    0
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-105963

    Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments

    Last Modified: Oct 23, 2026
    Published: Oct 23, 2026

    CVE-2026-56813

    Cookie attribute injection in Plug.Conn.Cookies.encode/2

    Last Modified: Sep 24, 2026
    Published: Jul 10, 2026

    CVE-2026-56814

    Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

    Last Modified: Sep 24, 2026
    Published: Jul 10, 2026

    CVE-2026-54892

    Plug: quadratic-time decoding of nested query/body parameters enables denial of service

    Last Modified: Jun 23, 2026
    Published: Jun 23, 2026

    CVE-2026-8468

    Unbounded buffer accumulation in multipart header parsing causes denial of service in plug

    Last Modified: May 14, 2026
    Published: May 14, 2026
    Items Per Page
    Elixir-Plug Vulnerabilities & Security CVEs | CVE-DB